Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Fix-it: Template Edition Details »
Fix-it: Template Edition
Mod Version: 2.00, by GeekyDesigns (Coder/Designer) GeekyDesigns is offline
Developer Last Online: May 2012 I like it Show Printable Version Email this Page

vB Version: 3.8.x Rating: (14 votes - 5.00 average) Installs: 122
Released: 15 Aug 2009 Last Update: 03 Apr 2012 Downloads: 875
Not Supported Additional Files  

A common method of defacing vBulletin sites is to edit the parsed template html directly via the database. It makes it harder for administrators to find the issue, and can be a pain in the ass to cleanup if you're not familiar with working with the database.

This tool will make it easier to clean your defaced site.

What it does:
Checks all of the templates in the database:
- Makes a new compiled version from the uncompiled template.
- Compares the current compiled template to the new compiled template
- If they differ, it updates the template, then rebuilds all of the styles.

How do you use it?
- Upload to your admincp, modcp, install, or root forums folder
- Browse to it
- Let it run
- Delete tool_recompiler.php after you are done using it.

This tool now works on vB3 and vB4.

vB4 Thread

Download Now

Only licensed members can download files, Click Here for more information.

Supporters / CoAuthors

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 15 Aug 2009, 22:46
BigDog56 BigDog56 is offline
 
Join Date: Jan 2007
Ok, but how does someone without access the the database able to do this to begin with? (Forgive me here, I don't mean to be stupid. But If I don't ask, I won't learn. )
Reply With Quote
  #3  
Old 15 Aug 2009, 22:55
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
Originally Posted by BigDog56 View Post
Ok, but how does someone without access the the database able to do this to begin with? (Forgive me here, I don't mean to be stupid. But If I don't ask, I won't learn. )
They gain access on the server level, either though another account, or an exploit on a server.
__________________
Looking for ImpEx?
Reply With Quote
  #4  
Old 15 Aug 2009, 23:29
RTMdotORG RTMdotORG is offline
 
Join Date: Dec 2008
Originally Posted by Zachery View Post
They gain access on the server level, either though another account, or an exploit on a server.
Will this mod tell us if we have exploits then? im confused...
Reply With Quote
  #5  
Old 15 Aug 2009, 23:33
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
Originally Posted by RTMdotORG View Post
Will this mod tell us if we have exploits then? im confused...
No, it will repair the templates for you if you've been defaced by some random hacker group. I released the tool here because I thought people would like to have a tool to help them fix things.
__________________
Looking for ImpEx?
Reply With Quote
  #6  
Old 15 Aug 2009, 23:39
RTMdotORG RTMdotORG is offline
 
Join Date: Dec 2008
But if it repairs templates, does it save previous template? basically...

Can it destroy a template just as easy as fix one?
Reply With Quote
  #7  
Old 15 Aug 2009, 23:49
Link14716's Avatar
Link14716 Link14716 is offline
 
Join Date: Jun 2002
Real name: Matthew Gordon
Here is the explanation behind how the template system and this tool works.

Templates are stored in two ways. There is the unparsed template, which you edit in the Admin CP. It is the template as you know it. Then, there is the parsed template, which is the template after it has been ran through a function to convert things like <if> tags into valid PHP parsable code.

A common method of defacing vBulletin forums is for a hacker to directly edit the parsed version of the template in the database, leaving the unparsed template alone. When you go to edit the template in the Admin CP, you won't see anything different, but the parsed version of the template has changed.

What this tool does is it takes all of the unparsed templates from the database and creates a new parsed version from it. If the newly generated parse is different than the parsed version currently in the database, it will update the template, overwriting the old, probably compromised, parsed template. This process is not "dangerous" in any way. If you run it on a normal, uncompromised forum, you won't see it updating any templates.
__________________
Along with Zachery, I make releases as GeekyDesigns. Please do not PM or IM me for support.
Reply With Quote
  #8  
Old 15 Aug 2009, 23:50
Zachery's Avatar
Zachery Zachery is offline
 
Join Date: Jul 2002
Real name: Zachery Woods
No, it doesn't destory templates.

As explained already in the description, it checks the unprased template agasint the parsed template table. If the two don't match like they should, it takes your unparsed template and re-parses it and inserts it back into the database and removes the defacement.
__________________
Looking for ImpEx?
Reply With Quote
  #9  
Old 16 Aug 2009, 00:13
RTMdotORG RTMdotORG is offline
 
Join Date: Dec 2008
Thanks to both of you...
Reply With Quote
  #10  
Old 16 Aug 2009, 00:48
erel34's Avatar
erel34 erel34 is offline
 
Join Date: Dec 2007
thanks
__________________
Reply With Quote
  #11  
Old 16 Aug 2009, 05:43
RTMdotORG RTMdotORG is offline
 
Join Date: Dec 2008
Question: If it just rebuilds styles, it didn't find any issues?
Reply With Quote
  #12  
Old 16 Aug 2009, 05:55
testebr testebr is offline
 
Join Date: Jan 2004
Can you make a diagnostic edition where alert user instead to fix?
Reply With Quote
  #13  
Old 16 Aug 2009, 10:54
Link14716's Avatar
Link14716 Link14716 is offline
 
Join Date: Jun 2002
Real name: Matthew Gordon
Originally Posted by RTMdotORG View Post
Question: If it just rebuilds styles, it didn't find any issues?
Correct.
__________________
Along with Zachery, I make releases as GeekyDesigns. Please do not PM or IM me for support.
Reply With Quote
  #14  
Old 16 Aug 2009, 10:58
Link14716's Avatar
Link14716 Link14716 is offline
 
Join Date: Jun 2002
Real name: Matthew Gordon
Originally Posted by testebr View Post
Can you make a diagnostic edition where alert user instead to fix?
I don't see any reason to. All this does is fix parsed versions of templates that are different than the unparsed version. There is no reason not to ever fix this problem, as it would only happen if the parsed template was directly edited in the database. All a diagnostic version would do is not run the update query, which doesn't help any.

If you run this and no problems are found, it will simply rebuild the styles. If there is a problem found, it will tell you which template it updates.
__________________
Along with Zachery, I make releases as GeekyDesigns. Please do not PM or IM me for support.
Reply With Quote
  #15  
Old 16 Aug 2009, 14:28
SandmaninDubai SandmaninDubai is offline
 
Join Date: Mar 2009
Great fix Zachery!
My Forum was hacked twice & defaced in July & August (hosted by Hostmonster) - you fixed it manually twice (a HUGE thanks from all of here in the UAE) and now, if the nasty extreme muslims try it again this fix will wipe them.
Well done!
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 20:16.

Layout Options | Width: Wide Color: